Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31332e302f32342d3234203d3e20323632313832.roa
File:                     3230312e3231372e31332e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          1g5QLnu+T2aLz1xl9JsXgUSIlTPEKb1L1TUWAkw5vd8=
Subject key identifier:   6B:A0:F0:8E:36:FF:54:00:F7:5E:07:F4:7E:74:A1:2A:BC:16:11:46
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       1AECBED2A9FA614DBC44C2E29D797CF75CA649A6
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31332e302f32342d3234203d3e20323632313832.roa
Signing time:             Tue 05 Mar 2024 18:20:41 +0000
ROA not before:           Tue 05 Mar 2024 18:15:41 +0000
ROA not after:            Tue 04 Mar 2025 18:20:41 +0000
asID:                     262182
IP address blocks:        201.217.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 00:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ec:be:d2:a9:fa:61:4d:bc:44:c2:e2:9d:79:7c:f7:5c:a6:49:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:41 2024 GMT
            Not After : Mar  4 18:20:41 2025 GMT
        Subject: CN=6BA0F08E36FF5400F75E07F47E74A12ABC161146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cf:a7:79:11:8c:5b:bc:e9:fa:c5:0e:de:e7:
                    9d:4d:b9:39:1e:e7:78:d0:1e:ee:96:51:f4:da:bc:
                    5e:3b:84:bf:6a:70:f5:28:f6:5d:2f:05:d9:cc:ef:
                    22:f1:47:2c:5c:bc:09:1c:41:1d:cb:8a:1f:eb:77:
                    c5:e4:41:84:19:aa:d1:2f:bb:70:29:d6:a7:2f:7e:
                    41:f4:0e:51:2c:3d:c0:59:7c:e8:7d:de:bf:73:41:
                    27:e1:41:3d:3b:74:10:a1:1d:c2:07:6d:1b:c3:e7:
                    bd:3d:73:f5:53:e8:28:93:d0:17:9f:07:b0:20:ce:
                    0f:f0:99:00:2f:08:31:b5:d8:9f:4c:b4:63:3d:be:
                    40:19:58:88:02:8e:9e:cc:53:59:51:38:b7:30:81:
                    2e:13:0a:5c:74:3c:96:0a:01:58:8c:34:49:93:29:
                    f3:44:0b:9c:fa:3e:78:dc:07:2a:36:a4:e8:4a:31:
                    03:eb:b4:84:85:ab:0d:7d:48:5b:99:9d:51:70:3f:
                    e5:5a:94:fa:1b:c9:74:9e:99:5b:70:5c:f5:96:57:
                    2f:31:4a:89:c2:0a:f8:57:39:7f:19:4b:1c:37:cc:
                    97:72:d6:13:ce:32:69:53:ae:20:7a:52:4c:4a:5e:
                    88:eb:0f:04:52:6b:32:dc:40:32:0a:89:56:af:ee:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A0:F0:8E:36:FF:54:00:F7:5E:07:F4:7E:74:A1:2A:BC:16:11:46
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31332e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:d4:25:5d:68:e9:19:d9:91:40:2d:4b:c8:3f:e2:f8:73:2b:
         72:b6:63:e0:c5:1f:59:14:c5:3c:00:f2:75:64:49:2a:3f:95:
         53:8e:33:08:fa:08:ac:79:0b:5a:b1:06:27:08:7b:7b:35:d9:
         77:b3:18:32:01:8f:4d:4f:ae:cc:a6:72:4b:19:a2:d1:e0:9b:
         10:15:e9:0a:b4:b8:71:93:ae:8f:75:86:10:38:ae:60:70:c8:
         f4:5b:28:b1:e0:b5:c6:31:ac:b2:09:e4:81:6d:dc:38:ef:30:
         a8:49:f9:79:02:44:3c:8c:bd:0f:76:26:53:ec:ba:bd:6c:a9:
         61:b8:ec:e3:ea:d9:84:ed:ab:3b:f6:84:e4:b2:eb:90:b3:72:
         e6:60:f4:ec:ad:22:e5:a0:c7:a3:77:6b:2c:6a:1e:22:3c:73:
         49:84:b9:db:82:55:e9:12:08:49:b4:1e:5b:d5:d7:90:2a:7f:
         27:07:50:ab:0a:3f:61:25:05:20:cd:d5:95:a4:05:5a:ad:18:
         21:05:ae:36:59:b4:73:04:a2:12:f6:de:99:6b:6b:a8:1f:6b:
         d3:ed:a7:20:5a:0f:87:c6:d4:af:4d:1f:2d:9d:1b:b4:53:79:
         30:a0:13:a1:f5:a3:9f:57:43:18:b7:35:6f:27:5a:64:68:34:
         b6:8b:91:4e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGuy+0qn6YU28RMLinXl891ymSaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNDAzMDUxODE1NDFaFw0yNTAzMDQxODIwNDFaMDMxMTAvBgNV
BAMTKDZCQTBGMDhFMzZGRjU0MDBGNzVFMDdGNDdFNzRBMTJBQkMxNjExNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwz6d5EYxbvOn6xQ7e551NuTke
53jQHu6WUfTavF47hL9qcPUo9l0vBdnM7yLxRyxcvAkcQR3Lih/rd8XkQYQZqtEv
u3Ap1qcvfkH0DlEsPcBZfOh93r9zQSfhQT07dBChHcIHbRvD5709c/VT6CiT0Bef
B7Agzg/wmQAvCDG12J9MtGM9vkAZWIgCjp7MU1lROLcwgS4TClx0PJYKAViMNEmT
KfNEC5z6PnjcByo2pOhKMQPrtISFqw19SFuZnVFwP+ValPobyXSemVtwXPWWVy8x
SonCCvhXOX8ZSxw3zJdy1hPOMmlTriB6UkxKXojrDwRSazLcQDIKiVav7isXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUa6Dwjjb/VAD3Xgf0fnShKrwWEUYwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzMTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAydkN
MA0GCSqGSIb3DQEBCwUAA4IBAQBa1CVdaOkZ2ZFALUvIP+L4cytytmPgxR9ZFMU8
APJ1ZEkqP5VTjjMI+giseQtasQYnCHt7Ndl3sxgyAY9NT67MpnJLGaLR4JsQFekK
tLhxk66PdYYQOK5gcMj0Wyix4LXGMayyCeSBbdw47zCoSfl5AkQ8jL0PdiZT7Lq9
bKlhuOzj6tmE7as79oTksuuQs3LmYPTsrSLloMejd2ssah4iPHNJhLnbglXpEghJ
tB5b1deQKn8nB1CrCj9hJQUgzdWVpAVarRghBa42WbRzBKIS9t6Za2uoH2vT7acg
Wg+HxtSvTR8tnRu0U3kwoBOh9aOfV0MYtzVvJ1pkaDS2i5FO
-----END CERTIFICATE-----
Generated at Wed May 1 18:11:13 2024 by rpki-client on console-ams.rpki-client.org